Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa
File:                     40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa (raw, json)
Hash identifier:          gpVQywHhZojMhMNpdVzXNVkIz6EQmLT2JEN5rMB57u4=
Subject key identifier:   EB:6C:64:29:70:6C:86:96:07:0B:EB:E5:F0:A5:DF:F9:66:0C:8F:0A
Certificate issuer:       /CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6
Certificate serial:       010D0C9F4328584E4AEF3BA40102BD70F685B300
Authority key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        207.154.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:3b:a4:01:02:bd:70:f6:85:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=ad1c3ea6-3f39-417e-84e7-eb8aefbef203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:e5:25:cf:57:e0:af:43:24:bb:26:1c:3a:
                    eb:d1:6f:8c:55:d3:c3:b0:bf:51:d5:26:29:21:5b:
                    16:62:71:03:fe:81:50:15:d4:e5:25:16:54:7a:81:
                    1a:39:ba:89:68:de:70:34:69:4e:5a:65:19:93:63:
                    06:51:1e:66:95:bc:41:64:05:e4:1c:71:51:c4:22:
                    e1:cb:38:b2:4d:30:df:71:6c:6f:62:e3:68:a1:b1:
                    e6:28:7d:7c:3e:f3:3a:f9:37:68:04:b4:1d:f9:4d:
                    4d:09:ca:88:da:99:9b:09:6d:ca:7e:f8:ab:62:1f:
                    79:42:bc:c5:b6:47:a1:be:43:f4:96:41:32:e7:21:
                    9b:c9:50:fb:87:df:ff:0d:55:e1:0d:5f:ce:e0:e0:
                    c6:32:87:8c:7f:e8:99:9f:47:32:9f:b8:00:49:05:
                    24:55:65:04:47:92:96:ab:3d:a0:20:1c:7e:06:98:
                    81:65:b5:57:13:6c:90:3a:d3:89:6c:c1:3c:0c:d8:
                    9f:8a:a0:20:2b:46:6e:97:75:b6:8d:4d:ad:8d:ef:
                    b1:48:e1:e4:2c:0a:b7:ab:95:be:37:89:0b:40:ec:
                    9d:f2:04:57:65:30:ee:9b:e3:d7:cc:22:be:f5:36:
                    a5:fe:5a:6a:d2:d0:61:a6:f1:62:a8:f0:bb:0b:5d:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:64:29:70:6C:86:96:07:0B:EB:E5:F0:A5:DF:F9:66:0C:8F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl

            X509v3 Authority Key Identifier:
                keyid:F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.154.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:f6:10:88:17:2f:e9:c3:4e:a5:9f:c8:fc:23:52:63:5a:
         e3:d6:18:0c:06:53:b5:a1:3b:45:cc:73:fc:e5:df:02:70:ca:
         d1:33:f1:3f:c1:91:2d:57:ba:86:a5:3d:d9:66:99:ab:c4:eb:
         aa:d8:ed:57:89:21:36:b0:69:f9:2a:eb:fc:f0:67:6b:7d:42:
         d6:65:e4:58:b7:b4:34:1a:9b:d5:c2:18:7a:fb:db:2c:88:f5:
         55:ca:0b:31:4a:2c:07:4f:31:84:be:46:01:3b:df:0b:dc:5f:
         35:29:96:2f:a0:72:fa:1a:a4:0a:e3:3e:53:66:f4:6b:66:6e:
         73:39:c4:90:b9:a1:14:aa:21:68:ff:fc:7e:43:0a:25:dc:03:
         36:33:2b:83:c9:ea:ac:38:0e:4c:65:a2:74:15:cc:2f:d5:ec:
         1d:00:5c:ba:0f:38:4e:47:86:12:7f:99:fb:7a:18:60:4a:db:
         89:c3:fd:c6:08:e2:09:33:f4:70:db:0e:9f:50:f1:b0:31:89:
         e0:7a:fa:f9:21:87:d3:50:a2:b4:d3:46:63:f9:5e:41:9c:8c:
         80:4f:44:6b:4e:53:c4:f5:4d:13:23:fd:80:52:53:4a:92:a0:
         45:99:ab:33:bf:f8:e5:25:35:6d:2d:9d:6e:cc:fe:1c:d4:e0:
         2f:36:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:36:01 2026 by rpki-client